The right to request deletion of data is already mandated in current laws, GDPR doesn't change much in that regard.

The hard part is actually enforcing it, and assessing compliance.